Protect your digital assets.

OneCritto Password Manager Offline

OneCritto protects your passwords, files and private notes using strong modern encryption. Completely offline, with no accounts and no cloud sync. Your master password and vault contents stay on your device, inside one portable encrypted digital vault.

AES-256 GCM Argon2 Key Derivation Local-only No in-app telemetry

One-time payment, no subscription. Same security for trial and full version.

OneCritto main screen

Why you can trust OneCritto

Trust should come from clear boundaries, not vague promises. Here is what OneCritto does and does not do.

What never leaves your device

  • Your master password is never sent to our servers.
  • Your vault contents, files and notes are not uploaded to the cloud.
  • There is no OneCritto account required to open your vault.
  • The developer cannot recover your master password or decrypt your vault.

What the website may process

  • reCAPTCHA tokens to prevent abuse on download and activation forms.
  • Your HWID to generate a device-bound license.
  • Your payer email from PayPal to deliver the purchased license.

Payment details are handled by PayPal directly. OneCritto does not collect or store credit card or bank account data.

Designed for security. Built for performance.

OneCritto protects your most sensitive information with modern encryption and a focused desktop experience. Everything runs locally on your device — no accounts, no cloud, no online dependencies.

Military-Grade Encryption

Every piece of data is encrypted with AES-256-GCM. Your master key is derived via Argon2id, with unique IVs and salts per record. Authenticated encryption ensures integrity at every level.

One Vault, Everything Protected

Passwords, files and private notes — all stored inside a single portable .onecritto encrypted vault. Copy it, back it up, carry it anywhere.

Sentinel — Vault Health Monitor

New in v2.3.0. Sentinel scores every password on a 0–100 scale, detects weak, common and duplicate credentials, and provides a prioritized rotation plan to keep your vault secure.

Smart Password Generator

Generate strong random passwords with configurable length and character sets. The generator uses the same Sentinel scoring engine — what it shows as "Strong" stays "Strong" in your vault.

100% Offline, Zero Cloud

No accounts, no cloud sync, no telemetry. Decryption happens only in memory; the clipboard is auto-cleared after 20 seconds and sessions lock after 3 minutes of inactivity.

Compatibility & Requirements

Optimized for Windows 11 and Linux. Windows 10 may work but is not officially guaranteed; macOS support is under development. Recommended: 64-bit CPU, 8 GB RAM, 200 MB free storage.

Simple pricing, lifetime license.

Start with a fully functional trial. When you are ready, unlock OneCritto forever with a one-time payment.

€ 12,87
Lifetime License • One Device (HWID)
Free Trial
  • Same encryption and features as the full version.
  • 15 days trial. License bound to your device.
  • Ideal to evaluate the workflow and UI.
Full License
  • Lifetime access on one device (HWID-based).
  • No subscriptions, no renewal fees.
  • Access to future minor updates of OneCritto 2.x.
  • Priority support by email.

After checkout you will receive a digitally signed license file bound to your device. Import it into OneCritto to unlock the full version.